$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa File: HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa (raw, json) Hash identifier: 4/FXyST5rMdhtMgZNqoOichYDa+sb3Eu+lRLTIEZ748= Subject key identifier: 1E:52:BA:8C:B6:54:31:C4:D3:A5:87:04:01:E6:72:F0:86:1C:34:5A Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A6D Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa Signing time: Fri 01 Sep 2023 10:07:53 +0000 ROA not before: Fri 01 Sep 2023 10:07:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 106.1.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10861 (0x2a6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1E52BA8CB65431C4D3A5870401E672F0861C345A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:15:09:8b:38:14:5d:5c:68:72:58:6d:fd: a2:19:a6:5b:98:00:6e:ef:c1:77:60:56:47:e0:22: 30:05:0c:9d:88:9a:b4:7e:68:5c:85:16:80:d0:d8: 73:e3:9d:a0:45:99:44:60:79:51:9f:22:32:57:4c: fe:41:fe:a1:58:b0:ea:ba:e2:ec:fc:26:29:6a:7a: 0e:38:3d:3d:6b:c3:7f:27:24:10:56:d4:24:2c:00: 03:e1:38:d3:59:2f:e5:45:73:ef:65:32:71:62:e7: 49:47:88:ce:2f:9c:ca:c4:d7:ae:cb:e4:f1:ba:5b: bc:1a:b5:db:c7:e1:e1:03:0e:fa:fd:61:0c:21:e2: 10:4b:74:89:fc:06:61:a6:fd:3f:e5:7d:2a:ad:58: d9:bd:a0:17:eb:f5:c7:ea:a2:cc:68:7b:f9:11:6f: ae:bf:49:70:7e:c1:00:cc:c8:35:04:c4:a1:8d:d7: 1f:e8:75:c8:d3:0a:13:01:ca:c9:92:a5:5f:37:33: 7f:79:54:55:8a:d7:9a:96:cb:85:9f:a6:1c:34:c8: 2e:b4:fc:44:4a:53:12:db:8d:dd:92:81:40:23:54: 17:eb:47:15:fd:b3:9e:36:df:e6:fd:09:a3:e5:b2: dc:0e:15:84:e6:8a:d4:c9:25:ef:bb:a9:08:e7:70: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:52:BA:8C:B6:54:31:C4:D3:A5:87:04:01:E6:72:F0:86:1C:34:5A X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HlK6jLZUMcTTpYcEAeZy8IYcNFo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 106.1.131.0/24 Signature Algorithm: sha256WithRSAEncryption 10:5c:94:3d:4f:5d:52:cb:46:c4:42:31:99:de:ff:c7:80:52: cd:f9:5d:16:a1:ad:de:43:b1:26:7c:79:24:dc:0b:84:db:6b: 7a:97:a1:a9:52:0d:52:5a:15:25:db:4a:50:6e:45:3f:95:e7: c5:4e:bc:79:5f:ee:02:1b:1e:f1:b2:8b:45:30:c6:2e:b4:16: bb:1e:25:33:3d:bf:af:ac:da:8a:04:de:92:86:25:ad:d2:5b: d2:98:59:b1:ae:5c:f8:68:bb:f0:c8:99:b3:7f:ec:6a:a0:dc: 64:9a:38:5a:cf:ce:f4:d0:af:f8:96:59:ff:4f:72:4b:6d:c7: cb:b7:f6:c3:4c:16:11:85:15:30:f2:46:68:8f:ec:14:cf:c9: dc:69:8c:60:64:19:0a:18:33:83:41:6a:0a:36:ff:4c:c7:60: 68:46:42:ea:23:fa:6a:11:f8:b3:59:be:ee:b8:95:df:2f:b5: b3:98:82:9a:c0:5e:56:2d:57:22:36:e5:ea:7c:31:56:49:57: 2c:c5:9a:88:d6:52:44:9d:12:84:ca:d9:22:d1:d1:0d:0e:5a: e8:35:9b:a0:d0:91:92:c5:cd:6e:1a:71:e0:20:57:ee:aa:85: 49:52:5e:1e:a1:29:ce:d2:c1:8f:00:8f:00:4c:c9:cc:3d:cc: 78:a4:0a:af -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFNTJCQThDQjY1NDMx QzREM0E1ODcwNDAxRTY3MkYwODYxQzM0NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkZxUJizgUXVxoclht/aIZpluYAG7vwXdgVkfgIjAFDJ2ImrR+ aFyFFoDQ2HPjnaBFmURgeVGfIjJXTP5B/qFYsOq64uz8Jilqeg44PT1rw38nJBBW 1CQsAAPhONNZL+VFc+9lMnFi50lHiM4vnMrE167L5PG6W7watdvH4eEDDvr9YQwh 4hBLdIn8BmGm/T/lfSqtWNm9oBfr9cfqosxoe/kRb66/SXB+wQDMyDUExKGN1x/o dcjTChMBysmSpV83M395VFWK15qWy4Wfphw0yC60/ERKUxLbjd2SgUAjVBfrRxX9 s5423+b9CaPlstwOFYTmitTJJe+7qQjncAYzAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUHlK6jLZUMcTTpYcEAeZy8IYcNFowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hsSzZqTFpVTWNUVHBZY0VB ZVp5OElZY05Gby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq AYMwDQYJKoZIhvcNAQELBQADggEBABBclD1PXVLLRsRCMZne/8eAUs35XRahrd5D sSZ8eSTcC4Tba3qXoalSDVJaFSXbSlBuRT+V58VOvHlf7gIbHvGyi0Uwxi60Frse JTM9v6+s2ooE3pKGJa3SW9KYWbGuXPhou/DImbN/7Gqg3GSaOFrPzvTQr/iWWf9P ckttx8u39sNMFhGFFTDyRmiP7BTPydxpjGBkGQoYM4NBago2/0zHYGhGQuoj+moR +LNZvu64ld8vtbOYgprAXlYtVyI25ep8MVZJVyzFmojWUkSdEoTK2SLR0Q0OWug1 m6DQkZLFzW4aceAgV+6qhUlSXh6hKc7SwY8AjwBMycw9zHikCq8= -----END CERTIFICATE-----Generated at Mon Jun 3 12:09:04 2024 by rpki-client on console-ams.rpki-client.org